4/11/2009

Conficker also installs fake antivirus software

Filed under: — Aviran

Researchers have discovered another feature of the Conficker worm that provides an additional clue about the intent of the creators–the worm installs malware that masquerades as antivirus software, Trend Micro said on Friday.

The worm, which has infected millions of Windows-based computers on the Internet, is downloading a program called Spyware Protect 2009 and displaying warning messages saying that the computer is infected and offering to clean it up for $49.95, according to the Trend Micro blog.

The infection alerts repeatedly appear and experts are worried that people may be clicking on them and paying for the software just to be rid of the annoying messages, thereby handing thieves their credit card information.

The fake antivirus program also attempts to install a Trojan downloader that is programmed to download new versions of Spyware Protect 2009, according to Kasperky Lab’s blog. However, the domain the Trojan downloader was being accessed from has been shut down, the blog said.

The fake antivirus feature further bolsters the speculation that the motivation behind the worm is to make money and not a desire to disrupt computer or network operations.

Researchers were still analyzing new component code of the worm that began being spread via peer-to-peer and being downloaded off domains that host the Waledec worm on Wednesday but were finding the task difficult because the instructions are encrypted.

The worm spreads via a hole in Windows that Microsoft patched in October, as well as through removable storage devices and network shares with weak passwords. The worm disables security software and blocks access to security Web sites.

YouTube and Universal to launch premium music site

Filed under: — Aviran

Google’s YouTube and Universal Music Group, the world’s largest music company, said on Thursday they will launch a premium music video website as they bid to increase revenue from YouTube’s huge usage.

The new advertiser-supported site, featuring professional videos, will be called Vevo and is expected to launch in coming months, the companies said.

The deal is a boost for YouTube, which has been under increasing pressure from music labels and publishers who are frustrated that the popular site has been unable to pay higher fees for rights to use their music and videos.

Has power grid been hacked? U.S. won’t say

Filed under: — Aviran

U.S. concerns about the potential for cyber-attacks on critical infrastructure extended to the American electrical power grid on Wednesday and experts pointed the finger anew at Chinese hackers, among others.

U.S. Homeland Security Secretary Janet Napolitano told reporters the power grid is vulnerable to potentially disabling computer attacks, while declining to comment on reports that an intrusion had taken place.

“The vulnerability is something that the Department of Homeland Security and the energy sector have known about for years,” she said. “We acknowledge that … in this world, in an increasingly cyber world, these are increasing risks.”

Napolitano spoke after the Wall Street Journal reported that cyberspies had penetrated the U.S. electrical grid and left behind software programs that could be used to disrupt the system.

The Journal said the intruders have not sought to damage the power grid or other key infrastructure but could try during a crisis or war.

Powered by WordPress